$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IM1a1a1DLnIhirGWk1oqJQONm9o.roa File: IM1a1a1DLnIhirGWk1oqJQONm9o.roa (raw, json) Hash identifier: bH7dqyCMFRhbLA/ba7neqwgN7Q7T8+KhxEv3jsryySU= Subject key identifier: 20:CD:5A:D5:AD:43:2E:72:21:8A:B1:96:93:5A:2A:25:03:8D:9B:DA Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Certificate serial: F1 Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IM1a1a1DLnIhirGWk1oqJQONm9o.roa Signing time: Sat 01 Nov 2025 01:28:32 +0000 ROA not before: Sat 01 Nov 2025 01:28:32 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 140224 IP address blocks: 117.103.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:35:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138 Validity Not Before: Nov 1 01:28:32 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=20CD5AD5AD432E72218AB196935A2A25038D9BDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:bd:4e:71:79:48:aa:b6:f7:13:47:05:4b: 8b:67:5a:b3:74:8b:78:9c:b0:16:8c:af:0f:60:13: 15:6e:6e:3b:76:01:2c:e8:95:85:c5:9c:75:c7:fa: 51:a2:39:07:bf:cb:40:d4:03:13:13:7b:4d:1c:aa: 07:84:41:c1:a9:b7:52:33:b5:fd:fd:b0:a8:d1:cb: ca:53:79:41:75:3e:9e:06:4f:91:23:d3:02:ce:81: e8:f8:a2:f1:04:e2:8e:8c:12:4e:3e:22:c6:75:3a: c2:0f:9e:a6:03:56:77:9d:dd:32:73:b8:51:01:3c: c2:8f:c7:02:73:4a:b7:7c:66:b6:13:d5:e1:91:e9: 43:7f:90:42:65:f2:35:40:fa:a8:1a:ac:a2:7e:e7: 42:02:92:a6:51:a9:ac:46:fb:6b:29:1d:91:48:b1: 2b:2d:1f:ca:d1:f0:5c:9f:58:ff:19:ff:30:d4:21: d7:0f:f2:98:94:04:8b:d7:b2:a1:86:ba:04:61:3e: 37:46:30:f9:e0:1a:27:85:ff:a1:83:76:ad:4c:1b: ea:f7:ea:62:5f:fe:8c:c4:ba:54:7a:07:c6:70:ca: 50:24:f3:a2:d2:cb:cb:eb:38:84:e5:0b:b9:dc:a9: 4f:86:9e:04:de:74:ab:03:50:15:df:44:cf:a5:63: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CD:5A:D5:AD:43:2E:72:21:8A:B1:96:93:5A:2A:25:03:8D:9B:DA X509v3 Authority Key Identifier: keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/IM1a1a1DLnIhirGWk1oqJQONm9o.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.190.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:08:48:c1:8a:93:73:9d:7d:87:f1:0e:dd:c1:1d:4a:09:ea: 19:39:6f:aa:fb:3c:62:f0:50:c1:e7:2e:dc:0a:51:da:27:d4: 06:c3:df:b4:0d:f8:58:d3:88:24:5c:fb:a8:b6:d5:bb:ba:d2: b8:66:f6:71:66:95:81:60:ee:56:8e:6b:6d:c3:ef:0d:76:37: b9:a1:df:2a:ee:e1:9f:9b:f9:91:1f:5c:ce:f0:35:c8:0a:d6: 5c:28:23:84:16:3a:30:9e:80:66:9a:86:89:70:74:58:08:65: 1e:61:b0:e9:7d:4d:22:1a:ec:a2:ac:5e:cc:de:0c:39:c5:99: 74:92:50:a9:c6:98:6b:41:6f:f4:da:e2:98:c9:4a:9c:ae:65: 17:4e:73:3b:93:f4:65:bd:e4:5b:60:2e:57:f8:59:6e:42:8e: 8d:fe:0e:19:5e:cd:4f:45:d1:c0:5c:43:f6:b6:71:05:0f:8d: 69:f9:f7:37:5b:09:89:8d:6d:04:28:46:f5:47:65:5f:6a:90: 14:78:de:4a:fa:cf:58:40:0f:a2:2c:31:86:ab:3d:12:80:99: b8:21:31:c7:83:7f:59:52:88:d1:1f:f4:3c:d8:ed:6e:0f:3b: 48:54:87:6b:02:f4:ed:25:18:d0:02:d6:0c:a0:1a:6a:ca:73: f8:44:d1:e8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEQ0 NkRERjg4QTQ2RTRFQzJEOUE5QkFCNUZGMTMwNUZEMDU3RjEzODAeFw0yNTExMDEw MTI4MzJaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIwQ0Q1QUQ1QUQ0MzJF NzIyMThBQjE5NjkzNUEyQTI1MDM4RDlCREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCxub1OcXlIqrb3E0cFS4tnWrN0i3icsBaMrw9gExVubjt2ASzo lYXFnHXH+lGiOQe/y0DUAxMTe00cqgeEQcGpt1Iztf39sKjRy8pTeUF1Pp4GT5Ej 0wLOgej4ovEE4o6MEk4+IsZ1OsIPnqYDVned3TJzuFEBPMKPxwJzSrd8ZrYT1eGR 6UN/kEJl8jVA+qgarKJ+50ICkqZRqaxG+2spHZFIsSstH8rR8FyfWP8Z/zDUIdcP 8piUBIvXsqGGugRhPjdGMPngGieF/6GDdq1MG+r36mJf/ozEulR6B8ZwylAk86LS y8vrOITlC7ncqU+GngTedKsDUBXfRM+lY0YrAgMBAAGjggIoMIICJDAdBgNVHQ4E FgQUIM1a1a1DLnIhirGWk1oqJQONm9owHwYDVR0jBBgwFoAUjUbd+IpG5Owtmpur X/EwX9BX8TgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzIwMTI4L2pVYmQtSXBHNU93dG1wdXJYX0V3WDlCWDhUZy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pVYmQtSXBHNU93dG1wdXJYX0V3 WDlCWDhUZy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8yMDEyOC9JTTFhMWExRExuSWhpckdXazFvcUpRT05tOW8u cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAdWe+MA0GCSqGSIb3DQEBCwUAA4IBAQAtCEjBipNznX2H8Q7dwR1K CeoZOW+q+zxi8FDB5y7cClHaJ9QGw9+0DfhY04gkXPuottW7utK4ZvZxZpWBYO5W jmttw+8Ndje5od8q7uGfm/mRH1zO8DXICtZcKCOEFjownoBmmoaJcHRYCGUeYbDp fU0iGuyirF7M3gw5xZl0klCpxphrQW/02uKYyUqcrmUXTnM7k/RlveRbYC5X+Flu Qo6N/g4ZXs1PRdHAXEP2tnEFD41p+fc3WwmJjW0EKEb1R2VfapAUeN5K+s9YQA+i LDGGqz0SgJm4ITHHg39ZUojRH/Q82O1uDztIVIdrAvTtJRjQAtYMoBpqynP4RNHo -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:17 2025 by rpki-client